Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/29012c1e0b191e34f6de6190cc38fae5d3df59d9.roa
File:                     29012c1e0b191e34f6de6190cc38fae5d3df59d9.roa (raw, json)
Hash identifier:          lYm+GEtfQqZkNu3OdAVLQm8Q8iWG6bMm6rPrwug5Xdc=
Subject key identifier:   D4:2D:86:71:52:15:E9:93:DE:DD:01:90:18:5D:26:4D:59:5D:01:BE
Certificate issuer:       /CN=5be393491eb2c03f14214a706c7be3bb76a02485
Certificate serial:       23B01B
Authority key identifier: 81:52:EF:3A:9B:F5:23:2B:AA:03:28:C5:89:F0:B8:04:1E:FB:36:22
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5be393491eb2c03f14214a706c7be3bb76a02485.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/29012c1e0b191e34f6de6190cc38fae5d3df59d9.roa
Signing time:             Tue 03 Oct 2023 20:25:16 +0000
ROA not before:           Mon 02 Oct 2023 20:25:15 +0000
ROA not after:            Fri 03 Oct 2025 21:25:15 +0000
asID:                     264668
IP address blocks:        45.236.168.0/22 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2338843 (0x23b01b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5be393491eb2c03f14214a706c7be3bb76a02485
        Validity
            Not Before: Oct  2 20:25:15 2023 GMT
            Not After : Oct  3 21:25:15 2025 GMT
        Subject: CN=29012c1e0b191e34f6de6190cc38fae5d3df59d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:45:6d:d4:09:7d:85:7e:5f:05:b4:4a:67:fa:
                    26:01:53:69:e2:aa:27:f4:5a:d4:64:1c:e8:5d:bf:
                    54:0f:57:99:ae:c3:7b:c3:d3:1b:24:a0:32:e7:6d:
                    81:83:76:9d:ca:aa:d1:1c:be:f3:33:76:c3:ca:b9:
                    1f:3c:f4:b0:d0:e0:bf:dd:eb:c0:4f:85:e8:68:b5:
                    a6:75:9d:38:b5:bf:2c:79:05:da:1b:53:c9:b4:b0:
                    e4:81:69:34:d3:81:b3:aa:34:c4:b1:c5:75:94:71:
                    ad:3e:6e:64:3d:11:b5:74:c9:9f:a0:9f:f4:3b:21:
                    a6:8f:c3:09:b1:2b:53:46:a1:4e:3e:49:de:94:f1:
                    91:90:95:64:aa:d8:40:4a:a0:2b:f5:dd:e0:d1:a4:
                    13:95:f8:21:44:2e:ce:96:d9:5c:51:05:14:b1:84:
                    85:f1:eb:cf:b7:93:89:4d:b9:1f:23:25:a6:e7:ab:
                    d2:b1:5c:9f:fa:95:f4:ce:f2:83:a0:7c:29:c3:c5:
                    7b:63:b5:1d:29:c7:c2:47:88:8b:e3:c1:e0:eb:ac:
                    c7:07:e1:a4:88:53:be:ab:d8:8a:3d:99:bb:d3:a8:
                    55:22:3a:e1:e3:e3:41:4d:30:6e:74:e3:a9:ca:1a:
                    11:89:1e:6d:6c:8c:49:c5:c7:04:a4:b9:46:27:ae:
                    d2:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2D:86:71:52:15:E9:93:DE:DD:01:90:18:5D:26:4D:59:5D:01:BE
            X509v3 Authority Key Identifier:
                keyid:81:52:EF:3A:9B:F5:23:2B:AA:03:28:C5:89:F0:B8:04:1E:FB:36:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5be393491eb2c03f14214a706c7be3bb76a02485.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/29012c1e0b191e34f6de6190cc38fae5d3df59d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/704efe10-5f80-40a3-b317-758e6932ec3d/5be393491eb2c03f14214a706c7be3bb76a02485.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:8c:ff:d8:c2:45:fe:dd:2a:0c:72:7d:cf:b8:e0:3c:0d:71:
         46:57:63:04:8d:5c:2d:1f:3f:c4:bf:1c:d9:c8:f8:5d:51:fb:
         78:f4:da:28:83:0d:ae:8c:4a:a0:69:08:d2:24:aa:3a:45:f1:
         99:85:3d:a2:55:99:1b:a3:26:08:12:39:df:c2:5f:4c:2b:25:
         08:28:4a:07:f4:54:ca:b3:54:d3:60:e2:7b:2c:20:ad:87:b9:
         f6:4a:13:de:bb:59:73:01:1f:d0:2b:ba:e7:9e:6d:11:3d:a2:
         f2:5d:aa:9a:ed:6c:71:94:6f:12:97:24:f2:89:c7:be:5c:09:
         2d:79:af:2c:ee:de:47:07:29:a3:d6:2f:a2:d2:e5:c0:94:21:
         b2:45:1c:5f:80:92:06:97:c3:21:55:11:15:06:81:16:1b:25:
         0d:c4:1a:11:75:52:ca:b3:40:3d:b3:5f:7d:92:5b:d2:a9:60:
         a1:22:1b:c7:72:09:cc:9e:5e:c0:71:ce:1d:b1:70:6e:47:cc:
         66:4a:d9:ee:93:f9:ab:c7:3d:2e:63:a9:d9:22:44:ac:98:4f:
         32:f8:f1:9c:4f:04:38:b3:35:e2:6d:93:01:a7:4a:36:cf:d2:
         e0:fa:55:be:15:12:ec:ea:70:e5:f1:db:f7:8f:37:dd:ad:83:
         f6:8f:18:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:22 2024 by rpki-client on console-fra.rpki-client.org